This policy explains what Pure Freedom Travel (“we”, “us”) collects when you use this website to buy and manage eSIMs, why, who it goes to, how long it is kept, and how you can have it deleted.
What we collect
- Account details: your name, email address, password (stored only as a secure hash by our sign-in provider) and the country you live in.
- Guest purchases: if you buy without an account, the email address you give at checkout.
- Orders: the plans you buy, what you paid, any coupon used, the tax included, Stripe's reference for the payment, and the country used to work out the tax (taken from the billing address you enter on Stripe's payment page).
- eSIM details: the eSIM's identifiers (such as ICCID and IMSI, and its phone number where it has one), install codes, data usage, the network it last connected to, and the model and IMEI of the device it is installed on, as reported by our eSIM supplier.
- Reviews: if you review a purchase, your rating, title, text and the name you choose to show with it.
- Messages to us: what you send through our contact form (your name, email address, topic, any order or ICCID you mention, and your message).
- Your location, roughly: the country you pick on the site, or otherwise the country our host works out from your internet address, so we can show the right prices and tax. For visitors without an account this is kept only in a cookie on your device.
- Technical details: like every website, our host receives your internet address and the pages you request (see “Server logs” below). Your internet address is also held briefly in memory to limit repeated attempts on our forms; it is not saved to our database.
- Anonymous visit statistics: which pages are viewed, the referring website, and your browser, operating system, device type and approximate country (see “Website analytics” below).
We do not receive or store your card details. Payments are handled entirely by Stripe.
If you were given an eSIM by one of our business partners (for example a travel agency or phone shop), that partner may record your name, phone number and a short note in our system so they can help you with it later.
Why we use it
- To create your account and let you sign in.
- To issue, deliver and support your eSIMs and top-ups.
- To charge the right price and tax: customers in Australia pay GST, and some other countries' VAT is worked out from your billing address.
- To email you verification codes, password reset codes, your order confirmation and the other emails described under “Emails we send”.
- To ask for, publish and moderate reviews.
- To keep the financial records we are required to keep.
- To protect our forms from abuse and to find and fix faults.
- To understand, in aggregate, which pages are useful so we can improve the website.
Who we share it with
Only the services that make the store work, and only what each one needs:
- Stripe (payments) — receives your email address, the plan and price, and the billing country (plus a postcode or state where that country's tax depends on it) and card details you type on its payment page. If you have an account, we also create a Stripe customer record with your name and email address, which keeps your billing address and any card you choose to save for next time.
- eSIMfly (our eSIM supplier) — issues and manages your eSIM on the mobile networks. It receives only the plan ordered and the eSIM's identifiers, never your name, email address or payment details. It reports the eSIM details listed above back to us. Our staff can also send a text message to an eSIM through its system.
- Xero (our accounting software) — receives a record of each sale and refund: the plan, the amount and tax, Stripe's payment reference, the country the tax was charged for, and your email address in the invoice description. Depending on how our books are set up, the invoice may also be made out to you by name and email address.
- Supabase — provides secure sign-in and hosts the database that stores everything described in this policy.
- Proton Mail — sends our emails, and holds the messages you send through our contact form in our mailbox.
- Vercel — hosts this website (our servers run in its Frankfurt, Germany region), keeps the server logs described below, and provides our anonymous visit statistics.
- WhatsApp — only if you choose to message us on WhatsApp, in which case that conversation is also handled under WhatsApp's own privacy policy.
Some of these providers store information outside Australia. We also fetch currency exchange rates and tell search engines when our pages change; neither of those services receives anything about you.
We don't sell your personal information or use advertising trackers.
Reviews
After a purchase we invite you to review it, using a private link in your order email (and sometimes in a separate email, see below). A review is published straight away on our reviews page with your rating, title and text, the name you choose to show, the plan and destination, and the month it was written. Your email address is never shown.
Everyone who posts a review gets a discount code (10% off their next eSIM), whatever rating they give. We may hide or remove reviews. To have your review taken down, contact us.
Cookies
We use a few cookies that the website needs to work, and none for advertising or tracking:
- your chosen country and currency, so prices are shown correctly (kept for a year);
- sign-in cookies while you are signed in to your account;
- on a private eSIM page, a cookie that remembers you entered its password (kept for 30 days).
Website analytics
We use Vercel Web Analytics to count page views. It sets no cookies and stores nothing on your device, and it does not follow you across other websites. Each visit is recognised only by a hash of your request that is discarded after 24 hours, so it cannot be used to identify you or build a profile of you over time.
Before anything is sent we strip the page address down to the page itself: search terms and other query details are removed, the private link to your eSIM page is replaced with a placeholder, and account pages report only which page was viewed, never your name, email or order details. The statistics are only ever looked at as totals.
Server logs
Separately from the statistics above, our host Vercel logs the requests made to this website, including your internet address, the full address of the page requested and your browser's details. These logs are kept for a limited time under Vercel's own retention settings, and we use them to find and fix problems and abuse.
Emails we send, and spam
We email you:
- your verification and password reset codes;
- your order confirmation and its eSIM, which also contains a link to review the purchase and the discount offer for doing so;
- a note about a refund, if we refund you (Stripe may also email you about the refund);
- replies to messages you send us.
Our staff may also send you, by hand:
- an email asking how your eSIM was, with your review link and the discount offer, if you haven't reviewed that purchase yet;
- a service notice about your account when something has gone wrong on our side. For example, we emailed people whose verification code never arrived because of a fault, asking them to register again. We keep a record of the email address and date of each such notice so nobody receives it twice.
We don't run marketing mailing lists, we don't buy or rent address lists, and we never pass your address to anyone for their own marketing.
Advertising this website through unsolicited messages is prohibited. Nobody — no employee, reseller, affiliate, agency or other partner — is permitted to promote Pure Freedom Travel by sending unsolicited bulk or commercial email, SMS, instant messages, social-media messages or automated calls, or by posting unsolicited advertisements. That applies whether or not the recipient is a customer, and it applies to anyone acting for us or paid by us. We do not accept traffic, sign-ups or orders obtained that way: any account or partnership found to be behind it is closed, any commission is withheld, and where the law requires it the matter is reported.
If you received a message advertising this website that you did not ask for, it did not come from us and we want to know about it. Please send it to us with the sender's address and the full message, including its headers where you can, and we will act on it. To stop hearing from us, reply to any email we have sent you and ask, or delete your account; either way we will not contact you again except to deliver something you have paid for.
How long we keep it
- Your account: until you delete it.
- Guest purchases: a customer record holding your email address, linked to your purchases, is kept so your order email works and so those eSIMs appear if you later register with the same address. It stays until you ask us to delete it (see below).
- Checkouts that were never paid: deleted automatically after 15 days.
- Verification and password reset codes: stored only as a hash, valid for 10 minutes, and deleted once used or expired.
- Purchase records and invoices (with us, Stripe and Xero): for as long as tax and accounting law requires, which in Australia is generally at least five years.
- Reviews: published until you ask us to remove them or we remove them.
- Server logs: for the limited time Vercel keeps them.
Deleting your account
You can permanently delete your account at any time from your profile. This deletes your customer record (name, email address and country) and your sign-in. Records of past purchases (including the eSIM details above) stay in our database for accounting, no longer linked to your account here, though they still carry Stripe's payment references. Messages you sent us stay in our mailbox, and the note of any service notice we emailed you is kept.
Some records of your purchases are kept elsewhere because tax and accounting law requires us to keep them, and deleting your account does not remove them:
- Stripe keeps its record of each payment, and, if you had an account, your Stripe customer record (name, email address, billing country or postcode, and any saved card).
- Xero keeps the invoices and credit notes for your purchases, which show your email address (and may show your name).
Reviews you posted also stay published unless you ask us to remove them. If you bought as a guest, there is no account to delete: contact us from the email address you used and ask us to delete your customer record.
Contact
For any privacy question, or a request to access, correct or delete your information, contact us.
Who we are
Pure Freedom Travel is a registered business name of PF Enterprises Pty Ltd (ABN 39 681 029 327), the company behind this website and the one responsible for the personal information described in this policy.